This issue is for public reference.
KDAB has already has produced a patch for pinentry-qt4.
I can reproduce the problem with
pinentry-qt (KDE3) on Debian Lenny,
Package: pinentry-qt
Version: 0.7.5-2.1
gpgsm and gpg-agent is from Version: 2.0.11-1kk1
I am attaching a screenshot with the problem with the root certiciate
from
#1.2.840.113549.1.9.1=#706572736F6E616C2D667265656D61696C407468617774652E636F6D,CN=Thawte
Personal Freemail CA,OU=Certification Services Division,O=Thawte
Consulting,L=Cape Town,ST=Western Cape,C=ZA
#209900B63D955728140CD13622D8C687A4EB0085 S
For an easy test, make sure that gpg-agent.conf has allow-mark-trusted,
comment the trustlist entry if it is already there and kill -SIGUP the running
gpg-agent, if you have one. Now try to encrypt something to this key,
e.g. gpgsm -e -r 20:99:00:B6:3D:95:57:28:14:0C:D1:36:22:D8:C6:87:A4:EB:00:85 x
x.enc
This will trigger the allow-mark-trusted question.